Package · Maven

org.apache.commons:commons-text

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Critical 9.8

CVE-2022-42889 Public exploit EPSS 100%

Apache Commons Text prior to 1.10.0 allows RCE when applied to untrusted input due to insecure interpolation defaults

Apache Commons Text performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is "${prefix:name}", where "prefix" is used to locate an instance of org.apache.commons.text.lookup.String…

Apache Software Foundation Apache Commons Text com.guicedee.services:commons-text commons-text Debian Ubuntu Maven

Oct 13, 2022